Hi everyone,
I'm thinking about getting an ASUS wifi router but before I do, I really need to understand how guest wifis/AP isolation/"access intranet" settings work together in terms of isolation.
After I read all the documentation I would expect the system to work like the following:
| AP Isolation: OFF | | | | | | |
| | | Can devices on: | | | |
| | | Ethernet | Main Wifi | Guest WiFi 1 | Guest WiFi 2 | Guest WiFi 3 |
| See devices on: | Ethernet | Y | Y | N | N | N |
| | Main Wifi | Y | Y | N | N | N |
| | Guest WiFi 1 | N | N | Y | Y | Y |
| | Guest WiFi 2 | N | N | Y | Y | Y |
| | Guest WiFi 3 | N | N | Y | Y | Y |
| | | | | | | |
| | | Can devices on: | | | |
| | | Ethernet | Main Wifi | Guest WiFi 1
(access intranet ON) | Guest WiFi 2 | Guest WiFi 3 |
| See devices on: | Ethernet | Y | Y | Y | N | N |
| | Main Wifi | Y | Y | Y | N | N |
| | Guest WiFi 1 | Y | Y | Y | Y | Y |
| | Guest WiFi 2 | N | N | Y | Y | Y |
| | Guest WiFi 3 | N | N | Y | Y | Y |
| | | | | | | |
| | | | | | | |
| AP Isolation: ON | | | | | | |
| | | Can devices on: | | | |
| | | Ethernet | Main Wifi | Guest WiFi 1 | Guest WiFi 2 | Guest WiFi 3 |
| See devices on: | Ethernet | Y | Y | N | N | N |
| | Main Wifi | Y | Y | N | N | N |
| | Guest WiFi 1 | N | N | Y | N | N |
| | Guest WiFi 2 | N | N | N | Y | N |
| | Guest WiFi 3 | N | N | N | N | Y |
| | | | | | | |
| | | Can devices on: | | | |
| | | Ethernet | Main Wifi | Guest WiFi 1
(access intranet ON) | Guest WiFi 2 | Guest WiFi 3 |
| See devices on: | Ethernet | Y | Y | Y | N | N |
| | Main Wifi | Y | Y | Y | N | N |
| | Guest WiFi 1 | Y | Y | Y | N | N |
| | Guest WiFi 2 | N | N | N | Y | N |
| | Guest WiFi 3 | N | N | N | N | Y |
Can someone please confirm this is in fact how it works or make any amendment.
And: is it possible to make port forwarding rules to devices inside guest wifis?
Really appreciate
ASUS documentation on this for reference:
Access Intranet
"This feature only works in Wireless router mode"
"The default is [Off ], the guest device cannot access other devices or services connected to your private network (such as NAS, My Network Places, computer shared folders, etc.)."
"You can select [enable] this feature if you want to allow guest devices to access these devices and services connected to the private network."
AP Isolation
"When this feature is enabled, wireless clients or devices will not be able to communicate with each other. You may want to utilize this feature if you have many guests frequently using your wireless network."
"AP Isolation works per interface (hardware-wise), which means device on the same interface will see other devices that are located on the same interface."
